2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32808 | MEDIUM | 5.4 | 1.2% | Aug 12, 2021 | ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the cli... |
| CVE-2021-38597 | MEDIUM | 5.9 | 0.5% | Aug 12, 2021 | wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains... |
| CVE-2021-35955 | MEDIUM | 4.8 | 0.6% | Aug 12, 2021 | Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field. Fixed in 4.4.56, 4.9.18, 4.11.7. |
| CVE-2021-27793 | MEDIUM | 5.3 | 0.9% | Aug 12, 2021 | ntermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and af... |
| CVE-2021-27791 | MEDIUM | 5.4 | 0.6% | Aug 12, 2021 | The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade... |
| CVE-2021-38087 | MEDIUM | 6.1 | 0.6% | Aug 12, 2021 | Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009. |
| CVE-2021-37699 | MEDIUM | 6.1 | 1.2% | Aug 12, 2021 | Next.js is an open source website development framework to be used with the React library. In affected versions speciall... |
| CVE-2021-38590 | MEDIUM | 5.5 | 0.3% | Aug 11, 2021 | In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584). |
| CVE-2021-38586 | MEDIUM | 4.4 | 0.2% | Aug 11, 2021 | In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589). |
| CVE-2021-37697 | MEDIUM | 6.5 | 0.7% | Aug 11, 2021 | tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t... |
| CVE-2021-37696 | MEDIUM | 6.5 | 0.7% | Aug 11, 2021 | tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t... |
| CVE-2021-1114 | MEDIUM | 4.4 | 0.2% | Aug 11, 2021 | NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to co... |
| CVE-2021-1113 | MEDIUM | 4.7 | 0.2% | Aug 11, 2021 | NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauth... |
| CVE-2021-1112 | MEDIUM | 5.5 | 0.2% | Aug 11, 2021 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complet... |
| CVE-2021-1111 | MEDIUM | 6.7 | 0.3% | Aug 11, 2021 | Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an in... |
| CVE-2021-1109 | MEDIUM | 6.3 | 0.2% | Aug 11, 2021 | NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera r... |
| CVE-2021-22098 | MEDIUM | 6.1 | 0.7% | Aug 11, 2021 | UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the o... |
| CVE-2021-32440 | MEDIUM | 5.5 | 0.8% | Aug 11, 2021 | The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference)... |
| CVE-2021-32438 | MEDIUM | 5.5 | 0.8% | Aug 11, 2021 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereferen... |
| CVE-2021-32437 | MEDIUM | 5.5 | 0.8% | Aug 11, 2021 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) v... |
| CVE-2021-3048 | MEDIUM | 5.9 | 0.8% | Aug 11, 2021 | Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop... |
| CVE-2021-3046 | MEDIUM | 6.5 | 1.1% | Aug 11, 2021 | An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated ... |
| CVE-2021-3045 | MEDIUM | 4.9 | 0.8% | Aug 11, 2021 | An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated a... |
| CVE-2021-38549 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to a... |
| CVE-2021-38548 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a te... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now